PRODUCT PROFILE

asgaros_forum

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2025-114522026/09/30

Asgaros Forum < 3.2.0 - SQL Injection

Asgaros Forum for WordPress versions prior to 3.2.0 is vulnerable to unauthenticated SQL injection through the asgarosforum_unread_exclude cookie. The cookie is JSON-decoded and its object keys are imploded into a NOT IN() clause without sanitisation. The vulnerable query only runs while rendering the forum page, so the payload must be sent there rather than to the site root.

asgaros_forumPoC 已收录

CVSS—

严重CVE-2021-248272021/11/09

WordPress Asgaros Forum <1.15.13 - SQL Injection

WordPress Asgaros Forum plugin before 1.15.13 is susceptible to SQL injection. The plugin does not validate and escape user input when subscribing to a topic before using it in a SQL statement. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.

asgaros_forumPoC 已收录

CVSS9.8EPSS 72.3%